Avalanche

DATE	CVE	VULNERABILITY TITLE	RISK
2020-04-28	CVE-2020-12442	SQL Injection vulnerability in Ivanti Avalanche 6.3 Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250. network low complexity ivanti CWE-89 critical	9.8
2018-06-29	CVE-2018-8902	Improper Authentication vulnerability in Ivanti Avalanche An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. network low complexity ivanti CWE-287	6.5
2018-06-29	CVE-2018-8901	Unspecified vulnerability in Ivanti Avalanche An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. local low complexity ivanti	7.8